$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ee213b76-4298-3351-97a2-f6ced8601ec0.roa File: ee213b76-4298-3351-97a2-f6ced8601ec0.roa (raw, json) Hash identifier: gPm/4m64idkvIEpjkors+eCsBT+a38gMHMpIbtae6wo= Subject key identifier: 3E:4E:B4:CA:7A:78:CD:4E:23:B5:3D:D3:E7:97:0F:0E:2E:D4:88:F2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA58C8E043F4C4DBD34180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ee213b76-4298-3351-97a2-f6ced8601ec0.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 396594 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:58:c8:e0:43:f4:c4:db:d3:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=647e12ec-dffb-45dd-a1db-a75564c90db1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:68:86:1e:47:17:5b:27:4f:03:54:1f:d0:01: aa:c7:53:eb:35:3c:c1:3f:bd:10:ec:de:76:66:63: 44:85:4b:15:dc:34:10:b0:a7:69:87:2e:32:d3:3d: 04:87:71:b1:cf:ee:e0:a5:24:d1:ac:22:fd:2a:78: b3:eb:01:7e:1b:05:88:4f:4c:89:b4:e5:f2:50:77: 87:fe:32:c7:57:0f:05:2d:0e:bd:19:71:49:01:7e: 1a:29:77:b5:dd:3b:69:c2:a4:ba:ac:3c:32:fc:0b: a9:93:cb:12:1b:28:4a:06:c2:f3:c2:c2:a0:d0:6d: 03:a9:f4:15:9c:45:84:bc:38:f9:ec:34:a9:14:8b: d0:ca:19:49:a0:f4:a8:08:12:ea:93:6e:e1:40:f5: a8:60:dd:b5:96:64:95:ff:ba:91:79:0c:4c:dc:2c: ed:cb:a6:65:0c:71:a4:0a:e6:b6:47:3d:04:27:10: 21:5c:9a:da:b7:6b:36:52:ac:33:ad:da:73:4e:ba: 98:8e:be:d1:15:06:6e:b0:ff:1e:69:7e:1d:82:90: a7:9e:d7:22:a5:cf:1a:62:6e:a1:5d:03:ee:53:39: 73:6c:00:7f:69:d0:50:c5:34:e3:25:10:e9:e1:fa: 37:4a:98:4d:0f:2e:6a:19:4e:3d:38:f3:f9:2d:9f: 7b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:4E:B4:CA:7A:78:CD:4E:23:B5:3D:D3:E7:97:0F:0E:2E:D4:88:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ee213b76-4298-3351-97a2-f6ced8601ec0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:3d:11:cb:6b:64:e9:90:ff:9b:7d:ef:fc:46:f8:22:5b:69: 28:c6:3e:1d:c5:b2:0d:50:d1:1c:87:4a:f2:48:78:bc:55:dd: 26:1e:3c:43:9a:04:10:77:3c:4a:f2:aa:fc:4a:4b:75:fa:70: c7:86:71:af:5c:a5:58:94:9d:90:c9:f3:0c:e8:00:50:3b:9e: 8a:46:45:2a:74:af:6f:73:31:18:65:27:89:20:2f:53:29:86: 2c:15:a8:6c:bd:44:a8:de:32:e3:27:5f:87:1b:27:f6:03:c1: dd:20:8c:10:46:76:30:8a:15:94:86:9c:99:e1:1d:83:3e:59: 9c:e9:e0:49:d3:48:0a:66:43:cb:49:5f:64:a9:80:65:91:bd: 5c:ad:3e:8d:72:a3:27:a3:8d:74:2b:09:77:9a:4f:f9:8b:84: ff:ab:19:9e:99:e9:99:82:4a:71:22:a8:37:d1:b0:37:ef:97: 02:b7:90:fc:1b:61:2a:d1:26:04:b4:dc:20:d4:66:ef:69:34: 23:09:54:12:fb:64:ad:7f:cc:d1:20:6a:1b:62:e4:e5:d0:6b: c9:ae:77:24:35:83:ed:98:fb:93:ec:be:dc:8c:7b:20:ac:05: 9d:df:08:9c:6f:71:a7:22:b6:ad:2f:70:92:a6:64:dc:dd:fb: f9:9d:3f:ac -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+ljI4EP0xNvTQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NjQ3ZTEyZWMtZGZmYi00NWRkLWExZGItYTc1NTY0YzkwZGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GiGHkcXWydPA1Qf0AGqx1PrNTzBP70Q7N52 ZmNEhUsV3DQQsKdphy4y0z0Eh3Gxz+7gpSTRrCL9Kniz6wF+GwWIT0yJtOXyUHeH /jLHVw8FLQ69GXFJAX4aKXe13TtpwqS6rDwy/Aupk8sSGyhKBsLzwsKg0G0DqfQV nEWEvDj57DSpFIvQyhlJoPSoCBLqk27hQPWoYN21lmSV/7qReQxM3Czty6ZlDHGk Cua2Rz0EJxAhXJrat2s2UqwzrdpzTrqYjr7RFQZusP8eaX4dgpCnntcipc8aYm6h XQPuUzlzbAB/adBQxTTjJRDp4fo3SphNDy5qGU49OPP5LZ97AQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFD5OtMp6eM1OI7U90+eXDw4u1IjyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWUyMTNiNzYtNDI5OC0z MzUxLTk3YTItZjZjZWQ4NjAxZWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCAPRHLa2TpkP+bfe/8RvgiW2koxj4dxbINUNEc h0rySHi8Vd0mHjxDmgQQdzxK8qr8Skt1+nDHhnGvXKVYlJ2QyfMM6ABQO56KRkUq dK9vczEYZSeJIC9TKYYsFahsvUSo3jLjJ1+HGyf2A8HdIIwQRnYwihWUhpyZ4R2D Plmc6eBJ00gKZkPLSV9kqYBlkb1crT6NcqMno410Kwl3mk/5i4T/qxmememZgkpx Iqg30bA375cCt5D8G2Eq0SYEtNwg1GbvaTQjCVQS+2Stf8zRIGobYuTl0GvJrnck NYPtmPuT7L7cjHsgrAWd3wicb3GnIratL3CSpmTc3fv5nT+s -----END CERTIFICATE-----Generated at Thu Mar 26 16:06:29 2026 by rpki-client